XSS in Cisco Unified_meetingplace
CVE-2013-5495
Cross-site scripting (XSS) vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui44681.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.014 (68.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_meetingplace
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)